Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: e3HiPTOY+kq9m5tNJg/f1OBNlZJzKWktxgSBwvUU6Hw=
Subject key identifier: 57:0A:CE:8D:27:02:7F:7E:3B:47:85:F0:7A:BB:97:0B:74:5F:2A:77
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 0198D4A7B69ED40FDDDF2812D537CC6ADB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: L3VPH_zsfjbjwAwWmPKEb-EZRqg.roa (hash: UjjV+/8s9XVTqZqV/PGNgru/2pjUXQnn5HjnZe2AuZE=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: M+NfgcXZPvzlghD+7g8vyQx2pkIZ+DudNyNjmpu57Cs=)
3: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (hash: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b6:9e:d4:0f:dd:df:28:12:d5:37:cc:6a:db:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=570ace8d27027f7e3b4785f07abb970b745f2a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:2d:a1:2b:2c:89:d6:77:27:bc:8d:90:8b:
39:a0:bb:ae:eb:a0:07:42:e5:8d:da:c9:62:dd:8f:
b9:3c:29:8d:2f:d6:0c:90:1a:dc:c7:0e:c0:3c:63:
9a:5c:a1:8b:e0:aa:62:68:4d:59:c4:ca:31:ef:b1:
57:fc:6c:c4:a7:2c:81:d1:9e:1c:32:84:dc:4b:95:
51:37:c6:42:aa:7a:f3:65:60:f1:86:43:c9:3d:08:
a6:ed:a5:5a:c6:de:78:36:32:22:26:ff:46:c0:46:
66:f7:91:66:0a:29:2e:d0:7c:1a:7e:39:6e:66:42:
0d:72:67:22:fa:89:89:1a:42:ac:2a:2d:61:39:d4:
38:c9:ff:a0:08:1f:97:5f:69:6c:01:79:17:3c:7c:
b5:91:03:87:2d:8c:a8:c3:83:b2:b6:de:3b:72:ca:
1d:e7:d0:95:9b:58:79:a9:35:08:e0:4b:2b:cd:e5:
a9:c3:1e:30:30:86:55:f6:85:02:71:d7:32:12:66:
70:21:5d:a8:0a:0b:76:93:4b:79:be:8c:12:f4:b7:
51:d9:06:4a:86:2b:01:fe:85:6d:fe:74:5f:d2:63:
e1:f2:e7:d0:86:0c:4b:a5:54:01:a3:a3:24:44:94:
64:0c:bd:76:06:ee:28:ec:fe:6d:3c:73:ad:b3:88:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0A:CE:8D:27:02:7F:7E:3B:47:85:F0:7A:BB:97:0B:74:5F:2A:77
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:15:36:bd:77:2e:06:79:e2:93:d7:f9:1b:7c:7b:ae:40:48:
2b:3a:03:65:7f:80:e0:5e:32:c4:78:a4:76:9a:65:d2:73:30:
0d:7b:d8:4c:b8:2a:46:67:21:c0:6d:24:05:66:7d:cc:a7:15:
94:a2:60:f4:77:ba:5a:8c:fe:b1:d0:c0:75:79:c8:f1:f9:f3:
a3:b5:62:90:e1:10:a3:d7:01:2c:f3:8b:2f:3b:96:77:fd:74:
5c:60:e5:d5:c8:80:36:4a:e9:8d:7f:c4:cf:92:34:66:43:0f:
06:66:5e:f1:da:e0:84:18:b4:bb:a3:f7:d2:d3:81:e6:b5:25:
a1:e6:b7:a0:da:90:ca:33:43:b8:0e:e9:f0:9b:26:ae:77:93:
66:cc:68:61:1d:2f:79:af:83:e4:e6:ec:6e:3b:27:66:d6:68:
5e:61:7b:f0:61:c4:24:9c:ae:bd:67:4e:b2:d2:b1:f4:ac:c2:
c1:c6:23:c5:fa:8b:7e:48:a2:bd:20:14:72:34:90:73:d0:44:
4c:44:e5:13:e4:11:c4:73:1c:04:e5:16:e1:35:10:28:fe:9c:
64:a3:7f:d2:4f:9b:44:e4:ed:08:75:9c:ae:20:84:ff:29:e2:
de:f3:b5:c0:52:a9:f9:30:5f:88:d1:3f:1c:d9:f8:78:92:20:
75:6b:b9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:59:16 2025 by rpki-client